Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d6789155-86b1-3972-a062-f4fb620bc8a4.roa
File:                     d6789155-86b1-3972-a062-f4fb620bc8a4.roa (raw, json)
Hash identifier:          26SvIt/klC2WZjvvZgXD8rgOmCFF+URmbNMXzyeG6Tc=
Subject key identifier:   D9:B8:CA:4E:E1:79:AB:A1:A7:3B:24:91:89:B9:A1:6E:1D:17:C6:A6
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285849350EAB3E299177575D71AC80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d6789155-86b1-3972-a062-f4fb620bc8a4.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:ab:3e:29:91:77:57:5d:71:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=908f833b-4f6e-4c8f-832a-0081848c6422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:29:76:3b:f7:9f:e1:c9:9a:06:66:b5:52:71:
                    56:3e:1f:8b:ca:0b:01:c7:90:17:3a:d9:f6:54:0a:
                    f8:a0:e4:ec:07:9e:28:c2:8d:be:dc:7a:67:d1:94:
                    74:64:bf:b1:4b:6e:fe:90:24:84:91:59:b6:0d:78:
                    56:f2:10:d2:63:32:4d:85:24:4a:48:f8:a4:52:01:
                    1c:1f:5e:68:9c:42:62:80:1a:bf:2d:ac:35:4f:64:
                    5e:15:00:17:4d:f2:73:e7:f6:ec:85:a7:3d:75:e9:
                    ed:f3:ef:3f:9e:6f:15:5f:c0:0a:69:3f:c4:f8:9f:
                    14:7b:3f:26:7f:92:4a:49:2c:8e:08:46:52:b0:c1:
                    3d:6c:b9:c6:e2:44:4b:9c:78:f5:21:71:af:ce:94:
                    e8:0b:d2:e3:07:b6:9c:f0:09:60:51:24:e4:b0:75:
                    97:33:a0:8f:04:6d:df:99:2e:d5:ab:5e:85:d5:db:
                    cb:12:69:fa:3c:4c:fd:34:cf:23:9a:1e:6f:64:30:
                    42:4f:51:0f:98:b8:87:e1:87:ce:47:4f:bf:cf:96:
                    21:2d:1d:f4:69:9d:30:0c:af:80:fd:6e:b5:0f:2d:
                    11:75:32:ae:9b:e6:23:23:95:bc:0c:f5:ff:4b:51:
                    4a:4c:1d:1c:cc:84:7a:a0:5d:af:d0:cc:43:27:c9:
                    78:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B8:CA:4E:E1:79:AB:A1:A7:3B:24:91:89:B9:A1:6E:1D:17:C6:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d6789155-86b1-3972-a062-f4fb620bc8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1080::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c6:0f:1a:a7:3c:2d:49:38:ad:72:eb:3e:1b:0b:7c:d6:cd:
         d9:21:8a:ac:85:5c:0d:c3:f6:52:3c:bd:d1:53:fa:68:eb:bd:
         07:64:d5:dd:7c:12:df:41:f6:6c:2f:98:63:9d:34:b9:e8:f5:
         c5:23:cf:67:cb:77:09:16:fa:f7:a8:83:5f:57:cc:83:05:93:
         9f:8d:00:ca:88:28:ec:a3:1e:6b:34:e0:93:7f:1f:8d:5e:57:
         fc:5c:01:5b:15:c7:1b:45:8e:35:7b:52:6b:3f:8b:0c:13:10:
         85:51:24:68:35:95:f2:48:07:5a:c3:8e:32:f8:a6:2d:2d:ec:
         79:a5:40:7f:e8:e7:1c:a9:74:5e:da:90:4c:09:1b:71:66:1e:
         61:38:09:c1:e8:4d:ec:99:a6:92:83:13:23:67:39:ff:f9:c3:
         42:8b:0a:77:1f:7c:37:33:b9:61:cd:b5:05:8a:f0:7f:cb:17:
         12:88:42:2a:72:5e:5d:98:cc:4a:a7:b4:fb:5d:93:fa:b1:1b:
         78:ba:47:7d:c6:ee:95:26:a5:a0:47:20:d2:83:74:0e:c8:6f:
         64:f7:b0:7f:a3:04:ab:6b:1a:bb:3e:73:3f:dc:b6:15:11:db:
         65:a4:39:35:60:4f:97:18:2c:05:08:d6:83:48:4c:8c:15:81:
         4c:8d:48:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:40 2025 by rpki-client